CVE-2023-29099 Auth

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions.

Affected products and versions

Product	Affected versions	Fixed in
Divi 4.20	earliest → 4.20.2	No fix stated

Other CVEs of Divi

The 11 CVEs of Divi →

CVE-2026-91707 The The Divi theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including,… 5.3 Medium CVE-2026-4361 The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6 5.0 Medium CVE-2026-3853 The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the… 6.4 Medium CVE-2026-3852 The Divi theme for WordPress is vulnerable to Stored Cross-Site Scripting via the `skype_url` shortcode attribute of the… 6.4 Medium